12583 matches found
PT-2025-14395 · Watu Quiz · Watu Quiz
Name of the Vulnerable Software and Affected Versions: Watu Quiz versions n/a through 3.4.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...
PT-2025-14397 · Shortpixel · Shortpixel Adaptive Images
Name of the Vulnerable Software and Affected Versions: ShortPixel Adaptive Images versions 3.10.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...
PT-2025-14032 · WordPress · Wp Cards
Name of the Vulnerable Software and Affected Versions: WP Cards versions 1.5.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...
PT-2025-14453 · Google +2 · Google Chrome +2
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 135.0.7049.52 Description: The issue is related to an inappropriate implementation in Navigations, allowing a remote attacker to bypass the same origin policy via a crafted HTML page if the user is convinced to...
Security update for opera (important)
openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2025:0111-1 Rating: important References: Cross-References: CVE-2025-2783 Affected Products: openSUSE Leap 15.6:NonFree An update that fixes one vulnerability is now available. Description: This update for opera fixe...
PT-2025-14425 · WordPress · Wpfactory Advanced Woocommerce Product Sales Reporting
Name of the Vulnerable Software and Affected Versions: WPFactory Advanced WooCommerce Product Sales Reporting versions 3.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL...
PT-2025-14187 · Unknown · Gutena Kit – Gutenberg Blocks/Templates
Name of the Vulnerable Software and Affected Versions: Gutena Kit – Gutenberg Blocks and Templates versions n/a through 2.0.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...
PT-2025-14137 · Unknown · Wpopal Opal Portfolio
Name of the Vulnerable Software and Affected Versions: wpopal Opal Portfolio versions 1.0.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...
PT-2025-14130 · Unknown · Athemeart News
Name of the Vulnerable Software and Affected Versions: aThemeArt News, Magazine and Blog Elements versions n/a through 1.3 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacke...
PT-2025-14036 · Unknown · Pesapal Gateway For Woocommerce
Name of the Vulnerable Software and Affected Versions: Pesapal Gateway for Woocommerce versions 2.1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...
PT-2025-14059 · WordPress · Wp Travel Engine
Name of the Vulnerable Software and Affected Versions: WP Travel Engine versions through 6.3.5 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion'. This allows PHP Local File Inclusion...
PT-2025-14248 · WordPress · Galaxy Weblinks Wp Clone Any Post Type
Name of the Vulnerable Software and Affected Versions: Galaxy Weblinks WP Clone any post type versions n/a through 3.4 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, which allows phishing attacks. This vulnerability can be...
PT-2025-14045 · Houzez · Houzez Property Feed
Name of the Vulnerable Software and Affected Versions: Property Hive Houzez Property Feed versions n/a through 2.5.4 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in the Houzez...
PT-2025-14057 · Unknown · G5Theme Essential Real Estate
Name of the Vulnerable Software and Affected Versions: g5theme Essential Real Estate versions n/a through 5.2.0 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File...
PT-2025-14221 · Openai · Openai Tools For Wordpress & Woocommerce
Name of the Vulnerable Software and Affected Versions: OpenAI Tools for WordPress & WooCommerce versions 2.1.5 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: Fo...
PT-2025-14455 · Google +2 · Google Chrome +2
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 135.0.7049.52 Description: The issue is related to an inappropriate implementation in Autofill, allowing a remote attacker to perform UI spoofing via a crafted HTML page if the user is convinced to engage in...
PT-2025-14428 · Unknown · Vimal Kava Ai Search Bar
Name of the Vulnerable Software and Affected Versions: Vimal Kava AI Search Bar versions n/a through 1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS in the AI Search Bar...
PT-2025-14354 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.14.0-rc4+ Description: A vulnerability in the Linux kernel has been resolved, which caused a kernel panic in the bnxt get queue statsrx | tx function. This issue occurred when the qstats-get operation was...
PT-2025-14401 · Unknown · Podpirate Access Areas
Name of the Vulnerable Software and Affected Versions: podpirate Access Areas versions n/a through 1.5.19 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential...
